An Attacker Embedded a Macro Within a Word Processing File

Multiple Choice

An attacker embedded a macro within a word processing file opened by a user in an organization's legal department. The attacker used this technique to gain access to confidential financial data. Which two recommendations should a security expert make to mitigate this type of attack? (Choose two.)

A) controlled folder access
B) removable device restrictions
C) signed macro requirements
D) firewall rules creation
E) network access control